ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be entered, which makes it easier for remote attackers to guess passwords via a brute force attack.
| Software | From | Fixed in |
|---|---|---|
| argosoft / ftp_server | 1.4.1.8 | 1.4.1.8.x |
| argosoft / ftp_server | 1.4.1.6 | 1.4.1.6.x |
| argosoft / ftp_server | - | 1.4.2.4.x |
| argosoft / ftp_server | 1.4.2.1 | 1.4.2.1.x |
| argosoft / ftp_server | 1.4.2 | 1.4.2.x |
| argosoft / ftp_server | 1.4.1.1 | 1.4.1.1.x |
| argosoft / ftp_server | 1.4.1.5 | 1.4.1.5.x |
| argosoft / ftp_server | 1.4.1.2 | 1.4.1.2.x |
| argosoft / ftp_server | 1.4.1.4 | 1.4.1.4.x |
| argosoft / ftp_server | 1.4.1.7 | 1.4.1.7.x |
| argosoft / ftp_server | 1.4.1.3 | 1.4.1.3.x |
| argosoft / ftp_server | 1.4.1.9 | 1.4.1.9.x |